2024-01-29_3bf1b51522a5f3873a71cfdfe6e4a572_krakencryptor

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-29_3bf1b51522a5f3873a71cfdfe6e4a572_krakencryptor
Size

1.1MB
MD5

3bf1b51522a5f3873a71cfdfe6e4a572
SHA1

3dc868999bbb9a7b542f35cbf81b7129d6743a16
SHA256

b812e1aa9fc851671c99315919a05b535278e2504ea22300b124e0721e4a4c62
SHA512

de756817dec32293682ca79cf09edb934b9df1b11c24438eadb815846d1d48dce3742e2ff78b9e80d51c0f112e4d8dc03606badb69730b3cc4a2459a4a9e09f8
SSDEEP

24576:+kwDnAW97SHLOSk644Y4Y4vZgM6eP2SoS5:+kWV970LOQ44Y4Y4vF6eJ75

Score

1^/10

Malware Config

Signatures

Files

2024-01-29_3bf1b51522a5f3873a71cfdfe6e4a572_krakencryptor
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

56:76:82:f9:a3:a2:67:27:52:38:23:e3:85:62:a7:a3
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

31/08/2015, 00:00

Not After

29/10/2018, 23:59

Subject

CN=RES Software,O=RES Software,L='s-Hertogenbosch,ST=Noord-Brabant,C=NL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

74:75:c9:30:d8:61:06:02:48:bb:3b:f9:ed:10:4e:01
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

12/01/2016, 00:00

Not After

29/10/2018, 23:59

Subject

CN=RES Software,O=RES Software,L='s-Hertogenbosch,ST=Noord-Brabant,C=NL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:5b:98:8c:63:d9:14:cc:d6:54:60:c8:1e:c8:32:1e:4d:69:4c:49:29:ec:28:8a:b6:f9:e7:80:cb:83:39:f7
Signer

Actual PE Digest

1b:5b:98:8c:63:d9:14:cc:d6:54:60:c8:1e:c8:32:1e:4d:69:4c:49:29:ec:28:8a:b6:f9:e7:80:cb:83:39:f7

Digest Algorithm

sha256

PE Digest Matches

true

b3:1f:f5:aa:99:28:8e:7c:c5:d9:a5:43:21:79:c5:6e:cf:db:8b:69
Signer

Actual PE Digest

b3:1f:f5:aa:99:28:8e:7c:c5:d9:a5:43:21:79:c5:6e:cf:db:8b:69

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

L:\VSTS-WORK\47\s\Projects\Compiled\PwrGate\BabelOut\pwrgate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

56:76:82:f9:a3:a2:67:27:52:38:23:e3:85:62:a7:a3Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

74:75:c9:30:d8:61:06:02:48:bb:3b:f9:ed:10:4e:01Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

1b:5b:98:8c:63:d9:14:cc:d6:54:60:c8:1e:c8:32:1e:4d:69:4c:49:29:ec:28:8a:b6:f9:e7:80:cb:83:39:f7Signer

b3:1f:f5:aa:99:28:8e:7c:c5:d9:a5:43:21:79:c5:6e:cf:db:8b:69Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rsrc Size: 57KB - Virtual size: 57KB

.reloc Size: 512B - Virtual size: 12B

56:76:82:f9:a3:a2:67:27:52:38:23:e3:85:62:a7:a3
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

74:75:c9:30:d8:61:06:02:48:bb:3b:f9:ed:10:4e:01
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

1b:5b:98:8c:63:d9:14:cc:d6:54:60:c8:1e:c8:32:1e:4d:69:4c:49:29:ec:28:8a:b6:f9:e7:80:cb:83:39:f7
Signer

b3:1f:f5:aa:99:28:8e:7c:c5:d9:a5:43:21:79:c5:6e:cf:db:8b:69
Signer

.text
Size: 1.0MB - Virtual size: 1.0MB

.rsrc
Size: 57KB - Virtual size: 57KB

.reloc
Size: 512B - Virtual size: 12B